CVE-2025-58121 — Insufficient permission validation on multiple REST API endpoints

CVE-2025-58121

Insufficient permission validation on multiple REST API endpoints PUBLISHED

Description (CNA)

Insufficient permission validation on multiple REST API endpoints in Checkmk 2.2.0, 2.3.0, and 2.4.0 before version 2.4.0p16 allows low-privileged users to perform unauthorized actions or obtain sensitive information

Affected (CNA)

Vendor / product	Versions
Checkmk GmbH / Checkmk	affected 2.4.0 before 2.4.0p16; affected 2.3.0; affected 2.2.0

CWE

CWE-280

References

https://checkmk.com/werk/18983

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.